Understanding Voice over Ip Security (Artech House Telecommunications Library) (Hardcover)

Description

This authoritative and practical book offers a current and comprehensive understanding of VoIP (Voice over IP) security. You learn how to design and implement secure VoIP networks and services, and how to integrate VoIP securely in existing data networks. You discover how emerging IETF SIP and media security standards will affect future VoIP deployment, and how end-to-end encryption may be deployed to eventually protect all VoIP calls. The book explains Internet security basics, attack types and methods, and details all the key security aspects of a data and VoIP systems and networks, including identity, authentication, signaling, and media encryption.

This practical resource discusses security architectures of perimeter vs. end-to-end security in terms of VoIP systems. You also find security approaches and architectures in related applications, such as the World Wide Web, Secure Shell, and the PSTN. A chapter on client and server security discusses general security of Internet hosts in a VoIP system. Whats more, the book presents current techniques to combat spam and covers the future problems of spim (spam over instant messaging) and spit (spam over internet telephony).

Table of Contents

Introduction.

Introduction to Cryptography.

VoIP Systems.

Internet Threats and Attacks.

Internet Security Architectures.

Security Protocols.

General Client and Server Security Principles.

Authentication.

Signaling Security.

Media Security.

Identity.

PSTN Gateway.

Spam and Spit.

Conclusions.

描述

這本權威且實用的書籍提供了關於VoIP（網路語音）安全的最新和全面的理解。您將學習如何設計和實施安全的VoIP網路和服務，以及如何在現有的數據網路中安全地整合VoIP。您將了解新興的IETF SIP和媒體安全標準將如何影響未來的VoIP部署，以及如何部署端到端加密來最終保護所有VoIP通話。本書解釋了互聯網安全基礎知識、攻擊類型和方法，並詳細介紹了數據和VoIP系統和網路的所有關鍵安全方面，包括身份、驗證、信令和媒體加密。

這本實用資源討論了VoIP系統中的邊界安全和端到端安全的安全架構。您還可以找到相關應用程序（如萬維網、安全外殼和PSTN）中的安全方法和架構。關於客戶端和服務器安全的一章討論了VoIP系統中互聯網主機的一般安全性。此外，本書還介紹了當前對抗垃圾郵件的技術，並涵蓋了即時通訊垃圾郵件（spim）和網際網路電話垃圾郵件（spit）的未來問題。

目錄

引言。
密碼學簡介。
VoIP系統。
互聯網威脅和攻擊。
互聯網安全架構。
安全協議。
一般客戶端和服務器安全原則。
身份驗證。
信令安全。
媒體安全。
身份。
PSTN閘道。
垃圾郵件和垃圾郵件。
結論。